Loading threat actor…
BlackForums is a hacking-group name publicly identified as a member of the "Five Families" alliance formed in August 2023 alongside SiegedSec, Ghost Security, ThreatSec, and Stormous Ransomware. High-confidence reporting directly supports BlackForums' participation in that alliance, but does not provide corroborated detail on the group's independent operations, victimology, tooling, geographic origin, or specific tactics and procedures. Based on currently available information here, BlackForums is best characterized as an allied hacking or cybercriminal collective associated with other disruptive and hacktivist-linked actors, with insufficient verified detail to attribute additional capabilities or motivations beyond that relationship.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
1 malware family attributed to this actor across reporting.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.